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AMENDMENTS 
In the Claims 

1-106. (Canceled) 

107. (Currently Amended) A method comprising: 
providing a plurality of sockets, wherein 

each socket has an associated connection and an associated security token, 
each associated connection is inbound relative to a relay program, and 
the associated security token is provided by the associated connection; 

receiving a first connection and a first security token at a relay program, wherein 
the first connection is inbound relative to the relay program : 

creating a socket associated w^ith the first connection, wherein 

the creating comprises associating the first security token with the first 
connection; 

comparing the first security token with the associated security tokens; and 
in response to said comparing, 

if none of the associated security tokens match the first security token, including 

the socket in the plurality of socket s, and 
if the first security token and a security token associated with one of the 
plurality of sockets match, coupling an end point of the first 
connection to an end point of a connection associated with the socket 
associated with the matching security token, wherein 
a security token is a password, and 

the connection associated with the socket is inbound relative to the 
relay program . 

108. (Cancelled) 

109. (Cancelled) 
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1 10. (Previously Presented) The method of Claim 107 further comprising: 

in response to said comparing, if none of the associated security tokens match the first 
security token, 

upon a determination that the first connection is not to be associated with a 
socket, disconnecting the first connection. 

111. (Currently Amended) The method of Claim ((10911 102, wherein the coupHng the 
first connection to the connection o ss ociated with the soekct comprises: 

relaying a data stream between the first connection and the connection associated with 
the socket. 

1 12. (Currently Amended) The method of Claim ((10911 102, wherein the coupling the 
fir s t connection to tlic connection as s ociated witli the s oclc e t comprises: 

creating a single connection comprising the first connection and the connection 
associated with the socket. 

1 13. (Currently Amended) The method of Claim ((109(1 102 further comprising: 
decoupling the first connection and the connection associated with the socket from one 

another . 

1 14. (Currently Amended) The method of Claim 1 1 3, wherein 

the decoupling eeeurs decouples the first connection and the connection associated 
with the socket upon one of failure and disconnect of one of the first connection 
and the connection associated with the socket. 

115. (Currently Amended) The method of Claim ((109(1 102, wherein 
the first connection is transmitted through a first firewall program. 

116. (Previously Presented) The method of Claim 115, wherein 
the first connection is created by a protocol daemon. 

1 17. (Currently Amended) The method of Claim 1 16, wherein 
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a second connection connects the protocol daemon to a first program, and 
the protocol daemon couples the first connection |[to]] and the second connection to one 
another . 

118. (Currently Amended) The method of Claim 117, wherein the protocol daemon 
couples the first connection and the second connection to one another by virtue of the 

protocol daemon 

relays relaying a data stream between the first connection socket and the second 
conn e ction socket associated with the matching security token . 

1 19. (Previously Presented) The method of Claim 118, wherein 
the first program provides the first security token. 

120. (Currently Amended) A method comprising: 

creating a first connection [[to]] from a first program to a relay program, wherein 

the first connection is inbound to the relay program : 
receiving a first security token fi-om the first program at the relay program, wherein 

the first security token is a password : 
providing the first security token to the relay program; 
creating a socket associated with the first connection, wherein 

the creating comprises associating the first security token with the first 
connection; 

comparing the first security token with one or more security tokens associated with 
one or more corresponding connections, wherein 

each one of the one or more corresponding connections is inbound to the 

relay program; and 
in response to said comparing, 

if the first security token and a security token associated with a 

corresponding connection match, 

coupling the second connection to the connection associated with the 
matching security token, and 
if none of the associated security tokens match the first security token. 
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creating a second connection to [[a]] the relay program , wherein 
the second connection is inbound to the relay program, 
upon successful creation of the second connection. 

including the second connection with said one or more 

corresponding connections, and 
coupling the first connection and the second connection to one 
another 

providing the first s ecurity token to th e r e lay program; and 

upon s ucce s sful creation of the se cond connection, coupling th e fir s t connection to 



121 . (Previously Presented) The method of Claim 1 20, wherein 
the second connection is transmitted through a firewall program. 

122. (Previously Presented) The method of Claim 120 further comprising: 
relaying a data stream between the first connection and the second connection. 

123. (Cancelled) 

124. (Previously Presented) The method of Claim 120 further comprising: 
terminating the first connection and the second connection. 

125. (Cancelled) 
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126. (Currently Amended) The method of Claim 1(125)1 120, wherein 

the connection associated with the matching security token is initiated by a second 
program. 

127. (Currently Amended) The method of Claim II1251) 120, wherein 

the relay program relays data between the second connection and the connection 
associated with the matching security token. 

128. (Currently Amended) The method of Claim 121, wherein 
a protocol daemon program [[does]] performs 

the creating the first connection, 

the creating the second connection, 

the receiving the first security token from the first program, 

the providing the first security token to the relay program, and 

the coupling the first connection to the second connection. 

129. (Previously Presented) The method of Claim 128, wherein 

the protocol daemon program and the firewall program are resident on a single computer. 

130. (Previously Presented) The method of Claim 128, wherein 

the protocol daemon program and the first program are resident on a single computer. 

131. (Currently Amended) An apparatus comprising: 
means for providing a plurality of sockets, wherein 

each socket has an associated connection and an associated security token, 
each associated connection is inbound relative to a relay program, and 
the associated security token is provided by the associated connection; 

means for receiving a first connection and a first security token; 

means for creating a socket associated with the first connection, wherein 

means for creating comprises means for associating the first security token with 
the first connection; 

means for comparing the first security token with the associated security tokens; and 
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in response to said comparing, if none of th e o ss ociot e d sccurit>' token s match the first 
s ecurity token, 

means for including the socket in the plurality of socket s, if none of the 
associated security tokens match the first security token, and 

means for coupling an endpoint of the first connection to an endpoint of the 
connection associated with the socket associated with the matching 
security token, if the first security token and a security token 
associated with one of the plurality of sockets match, wherein 
a security token is a password . 



132. (Cancelled) 

133. (Cancelled) 



134. (Currently Amended) The apparatus of Claim 131 further comprising: 
in response to said comparing, if none of the associated security tokens match the first 
security token, 

upon a determination that the first connection i s not to be a ss ociotcd with o 
s ock e t^ means for disconnecting the first connectio n, upon a 
determination that the first connection is not to be associated with a 
socket . 



135. (Currently Amended) The apparatus of Claim 1(133]] 131 . wherein the means for 
coupling th e fir s t connection to th e conn e ction a s sociated with the socket comprises: 
means for relaying a data stream between the first connection and the connection 
associated with the socket. 



136. (Currently Amended) The apparatus of Claim I [133]] 131 , wherein the means for 

means for creating a single connection comprising the first connection and the connection 
associated with the socket. 
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137. (Currently Amended) The apparatus of Claim 1(133)] 131 further comprising: 
means for decoupling the first connection and the connection associated with the socket. 

138. (Currently Amended) The apparatus of Claim 137, wherein 

the means for decoupling eeews is configured to decouple the first connection and 

the connection associated with the socket upon one of failure and disconnect of 
one of the first connection and the connection associated with the socket. 

139. (Currently Amended) The apparatus of Claim [11331] 131, wherein 
the first connection is transmitted through a first firewall program. 

140. (Currently Amended) An apparatus comprising: 

means for creating a first connection [[to]] from a first program to a relay program : 

the first connection is inbound to the relay program ; 
means for receiving a first security token fi-om the first program , wherein 

the first security token is a password ; 
means for providing the first security token to the relay program; 
means for creating a socket associated with the first connection, wherein 

the means for creating comprises means for associating the first security token 
with the first connection; 
means for comparing the first security token with one or more security tokens 
associated with one or more corresponding connections, wherein 
each one of the one or more corresponding connections is inbound to the 
relay program; and 
in response to said comparing, 

means for coupling a second connection and the connection associated with 
the matching security token, if the first security token and a security 
token associated with a corresponding connection match, wherein the 
second connection is the corresponding connection, and 
means for creating a second connection to a relay program[[;l] . if none of the 
associated security tokens match the first security token, wherein 
the second connection is inbound to the relay program, and 
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upon successful creation of the second connection.. 

including the second connection with said one or more 

corresponding connections, and 
coupling the first connection and the second connection to one 

another 

mcon s for providing the fir s t security tok e n to the relay progrom; and 
means for coupling th e fir s t connection to the s econd connection upon s uccessful 
cr e ation of the s econd conn e ction . 

141 . (Previously Presented) The apparatus of Claim 140 fiirther comprising 
means for transmitting the second connection through a firewall program. 

142. (Previously Presented) The apparatus of Claim 140 further comprising: 

means for relaying a data stream between the first connection and the second connection. 

143. (Cancelled) 

144. (Previously Presented) The apparatus of Claim 140 further comprising: 
means for terminating the first connection and the second connection. 

145. (Cancelled) 

146. (Currently Amended) The apparatus of Claim [I145]l 140 . wherein 

the connection associated with the matching security token is initiated by a second 
program. 

147. (Currently Amended) The apparatus of Claim [[1451) 140 . wherein the relay 
program further comprises: 

means for relaying data between the second connection and the connection associated 
with the matching security token. 

148-164. (Cancelled) 
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165. (Currently Amended) A computer program product comprising: 

a first set of instructions, executable by a processor and configured to cause the processor 
to provide a plurality of sockets, wherein 

each socket has an associated connection and an associated security token, 
each associated connection is inbound relative to a relay program, and 
the associated security token is provided by the associated connection; 
a second set of instructions, executable by the processor and configured to cause the 
processor to receive a first connection and a first security token at the relay 
program, wherein 

the first connection is inbound relative to the relay program : 

a third set of instructions, executable by the processor and configured to cause the 

processor to create a socket associated with the first connection, wherein.the third 
set of instructions comprises 

a first subset of instructions, executable by a processor and configured to cause 
the processor to associate the first security token with the first connection; 
a fourth set of instructions, executable by the processor and configured to cause the 

processor to compare the first security token with the associated security tokens; 
a fifth set of instructions, executable by the processor and configured to cause the 

processor to include the socket in the plurality of sockets, in response to said 
comparing, if none of the associated security tokens match the first security token; 
a sixth set of instructions, executable by the processor and configured to cause the 
processor, in response to the fourth set of instructions, to 
couple an end point of the first connection and an end point of a connection 
associated with the socket associated with the matching security token 
to one another, wherein 
a security token is a password; and 
computer readable storage media, wherein said computer program product is encoded in 
said computer readable storage media. 

166. (Cancelled) 
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167. (Cancelled) 

1 68. (Previously Presented) The computer program product of Claim 1 65 further 
comprising: 

a seventh set of instructions, executable by the processor, responsive to said comparing, 
and configured to cause the processor to disconnect the first connection, 
if none of the associated security tokens match the first security token, and 
upon a determination that the first connection is not to be associated with a 
socket. 

169. (Currently Amended) The computer program product of Claim 1(16711 165 further 
comprising: 

an eigbtb seventh set of instructions, executable by the processor and configured to 
cause the processor to relay a data stream between the first connection and the 
connection associated with the socket. 

1 70. (Currently Amended) The computer program product of Claim (116711 165 further 
comprising: 

a Biatb seventh set of instructions, executable by the processor and configured to cause 
the processor to create a single connection comprising the first connection and the 
connection associated with the socket. 

171. (Currently Amended) The computer program product of Claim 1(167(1 165 further 
comprising: 

a tentb seventh set of instructions, executable by the processor and configured to cause 
the processor to decouple the first connection and the connection associated with 
the socket. 

172. (Currently Amended) The computer program product of Claim 171 further 
comprising: 

an eleventh eighth set of instructions, executable by the processor and configured to 

cause the processor to decouple the first connection and the connection associated 
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with the socket upon one of failure and disconnect of one of the first connection 
and the connection associated with the socket. 

173. (Currently Amended) The computer program product of Claim [(1671) 1^5, 
wherein the first connection is transmitted through a first firewall program. 

1 74. (Currently Amended) A computer program product comprising: 

a first set of instructions, executable by a first processor and configured to cause the first 
processor to create a first connection [[to]] from a first program to a relay 
program, wherein 

the first connection is inbound to the relay program : 

a second set of instructions, executable by the first processor and configured to cause the 
first processor to receive a first security token fi-om the first program to the relay 
program, wherein 

the first security token is a password, and 
said second set of instruction comprises 



a third set of instructions, executable by the first processor and configured to cause the 
first processor to create a socket associated with the first connection, wherein 
said third set of instructions comprises 

a second subset of instructions, executable by the first processor and 



a fourth set of instructions, executable by the first processor and configured to cause the 
first processor to compare the first security token with one or more security 
tokens associated with one or more corresponding connections; 

a fifth set of instructions, executable by the first processor and configured to cause 
the first processor to create a second connection to a relay program; 

a fifth sixth set of instructions, executable by the first processor and configured to cause 
the first processor to provide the first security token to the relay program; ftfi4 



a first subset of instructions providing the first security token to the 
relay program : 
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a sixth seventh set of instructions, executable by the first processor and configured to 
cause the first processor to couple the first connection to the second connection 
upon successful creation of the second connection; 

an eighth set of instructions, executable by a second processor, responsive to said 
comparing, and configured to cause the second processor to couple the 
second connection to the connection associated with the matching security 
token if the first security token and a security token associated with a 
corresponding connection match; 

a ninth set of instructions, executable by the second processor, responsive to said 
comparing, and configured to cause the second processor to include the 
second connection with said one or more corresponding connections if none 
of the associated security tokens match the first security token; and 

computer readable storage media, wherein said computer program product is encoded in 
said computer readable storage media. 

175. (Previously Presented) The computer program product of Claim 174, wherein the 
second connection is transmitted through a firewall program. 

176. (Currently Amended) The computer program product of Claim 174 further 
comprising: 

g s eventh a tenth set of instructions, executable by the first processor and configured to 
cause the first processor to relay a data stream between the first connection and 
the second connection. 

177. (Cancelled) 

178. (Currently Amended) The computer program product of Claim 174 further 
comprising: 

a eighth tenth set of instructions, executable by the first processor and configured to 
cause the first processor to terminate the first connection and the second 
connection. 
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179. (Cancelled) 

1 80. (Currently Amended) The computer program product of Claim [[179)1 174 . 
wherein the connection associated with the matching security token is initiated by a second 
program. 

181. (Currently Amended) The computer program product of Claim [[17911 174 . 
wherein the relay program further comprises: 

on tw e lfth s e t a subset of instructions, executable by the second processor, configured to 
cause the second processor to relay data between the second connection and the 
connection associated with the matching security token. 
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